Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3438203d3e20323732373037.roa
File:                     323830343a383736383a3a2f33322d3438203d3e20323732373037.roa (raw, json)
Hash identifier:          Gf6kRHE/BYttRO2gxXuE06CMuXfyfOfoTiE+t1hg/KU=
Subject key identifier:   CA:12:1D:3E:E9:DA:38:F3:2D:83:80:1A:F4:06:B0:9A:1B:25:7F:E3
Certificate issuer:       /CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
Certificate serial:       4E9236CDD476A5BE9AE3CBD95C3BFCA1A882808B
Authority key identifier: 7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3438203d3e20323732373037.roa
Signing time:             Fri 13 Jun 2025 13:02:32 +0000
ROA not before:           Fri 13 Jun 2025 12:57:32 +0000
ROA not after:            Fri 12 Jun 2026 13:02:32 +0000
asID:                     272707
IP address blocks:        2804:8768::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl
                          rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 03:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:92:36:cd:d4:76:a5:be:9a:e3:cb:d9:5c:3b:fc:a1:a8:82:80:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
        Validity
            Not Before: Jun 13 12:57:32 2025 GMT
            Not After : Jun 12 13:02:32 2026 GMT
        Subject: CN=CA121D3EE9DA38F32D83801AF406B09A1B257FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:45:53:23:e6:7a:65:d5:81:52:91:57:44:bb:
                    af:18:ad:d5:31:9b:5b:fc:39:03:f7:d8:a9:65:9e:
                    96:a5:62:83:ea:61:43:47:e7:ad:5e:04:10:6c:db:
                    d5:75:75:71:af:79:9e:42:9d:db:22:6d:85:44:c8:
                    4e:9f:d2:8e:8e:02:ae:2f:06:bd:01:6b:52:e2:f4:
                    0e:2f:49:50:3c:a5:70:45:89:a4:04:3d:af:ca:39:
                    25:1e:0d:99:3b:c0:5b:07:68:16:1c:50:10:b0:25:
                    45:d2:a6:21:33:64:22:36:77:af:68:39:be:68:01:
                    a6:9f:ef:78:36:9b:fe:e0:ae:80:cc:47:9c:60:68:
                    be:73:8c:2f:ff:42:f7:bd:e0:de:66:da:0c:4d:06:
                    01:4f:c0:9f:56:bc:34:7b:44:68:a5:db:63:77:82:
                    1f:d4:e1:b6:48:97:66:95:28:5d:b8:a9:46:e7:9e:
                    dc:43:03:01:62:8e:fa:49:5b:37:2d:19:df:f3:98:
                    5e:5c:c4:32:8b:a9:85:2c:b2:58:8c:e8:0f:da:b3:
                    7b:7a:96:e8:26:7b:5e:ac:7f:ae:71:1f:cf:99:17:
                    f8:6d:7a:73:12:87:c9:d8:20:87:eb:63:af:62:50:
                    a9:5e:7e:80:8f:88:9e:25:4a:44:27:b2:5a:1b:9e:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:12:1D:3E:E9:DA:38:F3:2D:83:80:1A:F4:06:B0:9A:1B:25:7F:E3
            X509v3 Authority Key Identifier:
                keyid:7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3438203d3e20323732373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:81:35:06:1f:5e:b5:d1:2a:ab:23:18:76:65:4d:d4:5d:92:
         af:1d:6b:46:6e:73:cf:0a:a8:76:09:45:41:ad:b4:65:c2:c9:
         46:25:fd:32:7b:2b:4b:de:c8:05:8a:ad:38:58:ad:ce:ea:bd:
         e8:17:30:0c:e9:33:0f:34:79:3d:31:dc:bc:7f:e8:cd:88:7e:
         4a:b2:f2:ab:bf:55:58:cf:c8:8b:7f:b5:64:11:ee:8a:2e:46:
         8f:85:d8:74:ca:5c:91:d2:0f:17:77:e2:72:88:d1:19:d2:d9:
         7e:6c:57:94:49:f6:49:cb:8a:7d:43:6a:d8:de:24:51:6b:25:
         30:c3:c7:1d:09:0e:3f:f1:20:1c:6b:80:c6:cc:3f:d1:b8:49:
         85:5c:b0:8b:72:53:46:2b:42:ae:9e:b8:a9:46:69:53:a9:7f:
         fb:a3:25:e4:42:d1:83:9e:41:7a:7f:05:70:68:0d:43:d0:01:
         58:d7:7e:08:f8:9c:ce:86:2b:a1:8b:95:51:54:58:73:10:6a:
         d6:7f:ed:97:e8:95:3c:58:f0:e5:5c:52:94:18:ed:61:4b:c6:
         c5:c7:b3:e7:18:f8:06:03:fa:7c:64:4b:1e:8b:b1:42:bd:45:
         0a:45:d3:90:4a:af:88:87:87:e9:36:35:0f:25:e9:1f:29:ea:
         b2:55:4d:3f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTpI2zdR2pb6a48vZXDv8oaiCgIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MwQ0VCQkFEMTNBNjlBQTdDOUJBRDc0OUVDNEU2OUFB
RTRENDNDRDAeFw0yNTA2MTMxMjU3MzJaFw0yNjA2MTIxMzAyMzJaMDMxMTAvBgNV
BAMTKENBMTIxRDNFRTlEQTM4RjMyRDgzODAxQUY0MDZCMDlBMUIyNTdGRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0RVMj5npl1YFSkVdEu68YrdUx
m1v8OQP32KllnpalYoPqYUNH561eBBBs29V1dXGveZ5CndsibYVEyE6f0o6OAq4v
Br0Ba1Li9A4vSVA8pXBFiaQEPa/KOSUeDZk7wFsHaBYcUBCwJUXSpiEzZCI2d69o
Ob5oAaaf73g2m/7groDMR5xgaL5zjC//Qve94N5m2gxNBgFPwJ9WvDR7RGil22N3
gh/U4bZIl2aVKF24qUbnntxDAwFijvpJWzctGd/zmF5cxDKLqYUssliM6A/as3t6
lugme16sf65xH8+ZF/htenMSh8nYIIfrY69iUKlefoCPiJ4lSkQnslobnsBhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyhIdPunaOPMtg4Aa9Aawmhslf+MwHwYDVR0j
BBgwFoAUfAzrutE6aap8m610nsTmmq5NQ80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzY4UDZvOUVib3hBajRRR3pDaWZYWVMxejZ0cWRhVDFmUFd2SkNldEpi
UmQvMC83QzBDRUJCQUQxM0E2OUFBN0M5QkFENzQ5RUM0RTY5QUFFNEQ0M0NELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDMENFQkJBRDEzQTY5QUE3
QzlCQUQ3NDlFQzRFNjlBQUU0RDQzQ0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2OFA2bzlFYm94QWo0UUd6Q2lmWFlTMXo2dHFkYVQxZlBXdkpDZXRKYlJkLzAv
MzIzODMwMzQzYTM4MzczNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzczMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASHaDANBgkqhkiG9w0BAQsFAAOCAQEAOIE1Bh9e
tdEqqyMYdmVN1F2Srx1rRm5zzwqodglFQa20ZcLJRiX9MnsrS97IBYqtOFitzuq9
6BcwDOkzDzR5PTHcvH/ozYh+SrLyq79VWM/Ii3+1ZBHuii5Gj4XYdMpckdIPF3fi
cojRGdLZfmxXlEn2ScuKfUNq2N4kUWslMMPHHQkOP/EgHGuAxsw/0bhJhVywi3JT
RitCrp64qUZpU6l/+6Ml5ELRg55Ben8FcGgNQ9ABWNd+CPiczoYroYuVUVRYcxBq
1n/tl+iVPFjw5VxSlBjtYUvGxcez5xj4BgP6fGRLHouxQr1FCkXTkEqviIeH6TY1
DyXpHynqslVNPw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:08:30 2025 by rpki-client